CVE-2020-9137

2020-12-2415:47:56

huawei

www.cve.org

privilege escalation

cloudengine

input validation

local attacker

high privilege

exploit

EPSS

Percentile

5.1%

JSON

There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful exploit will cause privilege escalation.

CNA Affected

[
  {
    "product": "CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800"
      },
      {
        "status": "affected",
        "version": "V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R005C20SPC800,V200R019C00SPC800,V200R019C10SPC800"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2020-9137